CVE-2013-0010
Microsoft System Center Operations Manager 2007 SP1 and R2 - Cross-Site Scripting
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.
References (3)
Core 3
Core References
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA13-008A.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16232
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003
Scores
EPSS
0.1662
EPSS Percentile
96.7%
Details
CWE
CWE-79
Status
published
Products (1)
microsoft/system_center_operations_manager
2007 r2 (2 CPE variants)
Published
Jan 09, 2013
Tracked Since
Feb 18, 2026